AMENDMENTS TO THE CLAIMS 



1-12. (Canceled) 

1 3 . (Currently Amended) Tfee A method of Claim 12 whoroin identifying paokot 
flows furth e r compris e s for classifying packets based on content, the method comprising : 
identifying packet flows, said packet flows comprising a TCP stream; 
determining if a packet is out of order; 

transmitting the out of order packet to its client to have missing packets resent; 
buffering the out-of-order packet until the missing packet is received; and 
making the packet flow associated with the missing packet available for content 
searching; 

searching packet content across the identifled packet flows to flnd one or more 

predetermined regular expressions; 
computing: a hash for predetermined strings of the regular expressions to find one or more 

subexpressions; and 
using a tag map to: 

perform a mapping between said regular expressions and said subexpressions; and 
generate a modified tag corresponding to matches between predetermined 
expressions and subexpressions; and 
tagging packets with said modified tags . 

14-17. (Canceled) 

18. (Previously Presented) A system for sequencing packet streams for content 
classification, the system comprising: 

an enqueue engine that receives the streams and reads the stream identification of stream 
packets to determine if a packet is out of order; 

a stream tracker interfaced with the enqueue engine that associates packets to streams 
based upon the stream identification read by the enqueue engine; 



-2- 



a dequeue engine interfaced with the stream tracker and operable to forward packets for 

classification based on the packets' stream identification; and 
a packet buffer interfaced with the enqueue engine for storing packets, wherein the 
enqueue engine is operable to: 

transmit an out-of-order packet so that missing packets can be resent; 
mark the out-of-order packet as sent; and 
buffer the out-of-order packet. 

19. (Canceled) 

20. (Original) The system of Claim 18 wherein the dequeue engine is further 
operable to receive a stream identification, forward the next packet of the stream associated with 
the stream identification if the stream tracker indicates the next packet is ready, and forward the 
next packet of a second stream if the next packet of the associated stream is not ready. 

2 1 . (Original) The system of Claim 20 wherein the dequeue engine updates the 
stream tracker to indicate when a packet is forwarded for classification. 

22-28. (Canceled) 
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